Ai Company Audit 1.0.0

核心功能为AI公司提供7类审计日志规范，含存储保留、合规检查点及P0事件审计标准，支持跨Agent追踪。典型场景包括审计指定时段决策日志、检查P0 SLA合规性、导出特定事件审计追踪。输入需指定日志类型，可选Agent编号、日期范围；输出含日志条目、合规状态、异常列表。

johnsmithfan

热度 21.59

最近更新 2026-04-16 20:46:52

分类：安全依赖：纯提示词应用场景：报告撰写 / 法律文档 / 数据处理

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add ai-company-audit-1-0-0

Metadata

name: AI Company Audit
slug: ai-company-audit
version: 1.0.0
homepage: https://clawhub.com/skills/ai-company-audit
description: 跨Agent审计日志规范。7类日志（决策/操作/错误/安全/性能/访问/数据）+ 合规检查点 + 审计追踪标准，适配全AI公司治理框架。
license: MIT-0
tags: ["ai-company","audit","compliance","logging","governance","audit-trail"]
triggers: ["audit log","compliance","audit trail","logging standard","审计日志","合规检查","审计追踪","日志规范"]
interface: {"inputs":{"type":"object","schema":{"type":"object","properties":{"log_type":{"type":"string","enum":["decision","action","error","security","performance","access","data"],"description":"审计日志类型"},"agent_id":{"type":"string","description":"Agent编号（可选）"},"date_range":{"type":"object","properties":{"from":"string","to":"string"}}}}},"outputs":{"type":"object","schema":{"type":"object","properties":{"logs":{"type":"array","description":"日志条目数组"},"compliance_status":{"type":"object","description":"合规状态"},"anomalies":{"type":"array","description":"异常列表"}}}},"errors":[{"code":"AUDIT_001","message":"Log entry missing required fields","action":"Enforce schema: timestamp/agent/action/result"}]}
permissions: {"files":[],"network":[],"commands":[],"mcp":[]}
dependencies: {"skills":["ai-company-hq","ai-company-registry","ai-company-conflict"],"cli":[]}
quality: {"saST":"Pass","vetter":"Approved","idempotent":true}
metadata: {"category":"governance","layer":"AGENT","cluster":"ai-company","maturity":"STABLE","license":"MIT-0","standardized":true}

Audit Logging Standard — 审计日志规范

7类审计日志

Log Type	Description	Retention
Decision	战略/战术决策记录	2 years
Action	Agent 执行的操作	90 days
Error	系统异常和错误	90 days
Security	认证/授权/安全事件	2 years
Performance	延迟/吞吐量/KPI	30 days
Access	数据访问记录	2 years
Data	数据变更历史	7 years

Log Entry Schema

log_entry:
  timestamp: "ISO 8601 format (YYYY-MM-DDTHH:MM:SS.SSSZ)"
  agent_id: "e.g., CFO-001, CEO-001"
  log_type: "decision|action|error|security|performance|access|data"
  action: "string (what happened)"
  target: "string (affected resource/endpoint)"
  result: "success|failure|partial"
  duration_ms: 0
  metadata:
    task_id: "TASK-001"
    confidence: 0.95
    [敏感]: "redacted"
  trace_id: "uuid (for cross-agent correlation)"

Compliance Checkpoints

Checkpoint	Standard	Enforcement
P0 SLA 达成	95% P0 事件在 SLA 内完成	CQO 监控
敏感数据标注	所有 PII 字段含 `[敏感]` 标注	CISO 审计
跨 Agent 审计追踪	trace_id 贯穿完整调用链	CTO 技术实现
审计日志不可篡改	append-only + hash chain	CTO 技术实现
审计日志保留期	详见上表（7类）	CTO 存储策略

P0 Incident Compliance

P0 标准	响应要求	审计要求
响应时间	15 分钟内初始响应	时间戳记录
CEO 通报	立即通报	决策日志
根因分析	48 小时内完成	分析报告存档
改进项	7 天内入 backlog	追踪记录

Audit Log Storage Policy

storage_policy:
  format: "structured JSON (CloudWatch/Elasticsearch/Splunk compatible)"
  encryption: "AES-256-GCM at rest"
  replication: "3 copies across regions"
  access_control: "CQO + CISO read-only; CTO write-only"
  retention:
    decision: "2 years"
    security: "2 years"
    access: "2 years"
    performance: "30 days"
    action: "90 days"
    error: "90 days"
    data: "7 years"

Natural Language Commands

"Audit all decisions this week" → Decision logs filtered by date range
"Check compliance for P0 SLAs" → P0 compliance report
"Review access logs for sensitive data" → Access log audit
"Export audit trail for INC-001" → Trace by trace_id